User login

Donate

Donate for server costs [more]

Target:
$ 3000
Achieved:
$ 186.3
Fees:
$ 13.36
6.2 %
Donate
SourceForge.net Logo

PDFCreator Toolbar marked as Hijacker

No replies
beelymagee
Offline
Joined: 08/31/2010

I'm in the IT department at a community college campus and have installed PDF Creator on numerous student access and faculty/staff PCs. Our spyware intervention system, Counterspy, is now marking the PDFCreator browser toolbar (for Internet Explorer only) in the following manner and subsequently deleting the :

Threat:     MyBrowserBar
Category:   Hijacker

File:          C:\PROGRAM FILES\PDFCREATOR\BROWSERADDON\PDFCreator Browser Add On-14_0_170_setup.exe
File:          c:\program files\pdfforge toolbar\searchsettings.dll

Registry:      HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} -1
Registry:      HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\InprocServer32 -1
Registry:      HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\InprocServer32 1
Registry:      HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\InprocServer32\ThreadingModel 1
Registry:      HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1
Registry:      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} -1
Registry:      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1
Registry:      HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} -1
Registry:      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1
Registry:      HKEY_USERS\S-1-5-21-969291156-1403990781-1640847306-3714\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1
Folder:        C:\PROGRAM FILES\PDFCREATOR\BROWSERADDON

I had previous approval to install PDF Creator for users who needed simple PDF output, but because of this current spyware report, I have been instructed to remove installations from PCs. The version reported above is not the most current, but I can no longer upgrade/update the PDF Creator. A real shame as I've been promoting the use of PDF Creator for a number of years at a high school where I was previously employed.

Anyone else running into this?

__________________

-*-Bill

© pdfforge.org :: Contact us :: Sitemap